Medical Devices Product Security Engineer

Brainlab; Waldkirch; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

International team

Meaningful work

30 vacation days

Year-end days (Dec 24 & 31)

Team events

Fitness program

Training & education programs

TOP 100 innovator

Job summary

Dr. Langer Medical GmbH, part of Brainlab SE, is seeking a Medical Devices Product Security Engineer to take responsibility for cybersecurity across the product lifecycle. The role requires expertise in threat modeling, risk management, and regulatory compliance for Windows-based medical devices.

Collaboration with R&D, QA, and regulatory teams is essential. Join an international team delivering innovative intraoperative neuromonitoring and neurostimulation technology.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Electrical Engineering, Medical Engineering, or a related field.
• Several years of experience in cybersecurity, ideally within a regulated environment or the medical device industry.
• Strong knowledge of relevant cybersecurity standards and regulatory requirements.
• Experience with threat modeling, security risk management, and vulnerability assessment.
• Solid expertise in Microsoft Windows environments (Windows 10/11, Windows IoT, or Embedded Windows).
• Experience with system hardening, network security, and security testing.
• Structured and independent working style, combined with excellent German and English communication skills.

Responsibilities

• Take responsibility for the cybersecurity of our Windows-based medical devices throughout the entire product lifecycle.
• Analyze and implement regulatory requirements and relevant standards (e.g., IEC 81001-5-1, IEC 62304, ISO 14971).
• Conduct threat modeling, risk assessments, and vulnerability analyses.
• Develop, implement, and verify technical security controls and measures.
• Plan and execute security testing activities and support SBOM and vulnerability management processes.
• Prepare technical documentation and evidence required for product approvals and regulatory submissions.
• Collaborate closely with R&D, Quality Management, Regulatory Affairs, and external partners.

Skills

Threat modeling

Risk assessments

Vulnerability analyses

Windows security

System hardening

Network security

English communication

Education

Bachelor's or Master's degree in Computer Science, Information Security, Electrical Engineering, Medical Engineering, or related field

Tools

Windows environments (Windows 10/11, Windows IoT, Embedded Windows)

Job description

Medical Devices Product Security Engineer

• Full-time
• Department: R&D Software

Dr. Langer Medical GmbH, based in Waldkirch, Germany, which has been part of Brainlab SE in Munich since 2022, has specialized in the development and marketing of highly innovative medical technology for intraoperative neuromonitoring and neurostimulation for more than 25 years. Our products are groundbreaking in design and handling and form the basis for our worldwide growth. It is therefore no coincidence that the products from Dr. Langer Medical as well as the company itself have been honored several times in the past with various prizes and awards.

• Take responsibility for the cybersecurity of our Windows-based medical devices throughout the entire product lifecycle.
• Analyze and implement regulatory requirements and relevant standards (e.g., IEC 81001-5-1, IEC 62304, ISO 14971).
• Conduct threat modeling, risk assessments, and vulnerability analyses.
• Develop, implement, and verify technical security controls and measures.
• Plan and execute security testing activities and support SBOM and vulnerability management processes.
• Prepare technical documentation and evidence required for product approvals and regulatory submissions.
• Collaborate closely with R&D, Quality Management, Regulatory Affairs, and external partners.

• Bachelor's or Master's degree in Computer Science, Information Security, Electrical Engineering, Medical Engineering, or a related field.
• Several years of experience in cybersecurity, ideally within a regulated environment or the medical device industry.
• Strong knowledge of relevant cybersecurity standards and regulatory requirements.
• Experience with threat modeling, security risk management, and vulnerability assessment.
• Solid expertise in Microsoft Windows environments (Windows 10/11, Windows IoT, or Embedded Windows).
• Experience with system hardening, network security, and security testing.
• Structured and independent working style, combined with excellent German and English communication skills.

• A mutually-supportive, international team
• Meaningful work with a lasting impact on medical technology
• 30 vacation days, plus December 24th and December 31st
• Regular team, and company events
• Internal company fitness program
• Comprehensive training and continuing education opportunities offered by Brainlab
• TOP 100 innovator and employer of the future 2022